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(54) DEVICE AND METHOD FOR USER AUTHENTICATION 

(57)Abstract: 

PROBLEM TO BE SOLVED: To reduce a load on a 
server which performs user authentication in accessing 
other networks and to simplify the system structure. 
SOLUTION: An authentication information holding means 
2 holds what is authenticated by an authentication 
server ATS as authenticated user information among the 
authentication information which a database DB stores. 
When a user accesses other networks from a terminal 
TE, if the terminal TE is dial- up-connected to a 
network access server NAS, an authentication demand 
including a user name and a password is made by the 
terminal TE of the NAS. An in-NAS authentication 
means 3 retrieves whether or not the user name and the 
password are held by the authentication information 
holding means 2, 'authenticated' when the two coincide 
with each other or 'authentication denied' when the 
password does not coincide is replied to the terminal TE. 
Also, when the user name concerned does not exist, the 
authentication is demanded of the authentication server 
ATS. When the authentication server ATS finds the user name concerned in the database DB, it 
responds with fulfilled authentication to the NAS and the terminal, and holds its user name and 
the password in the authentication information holding means 2. 
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